I tend to forget this information,
and the openssl documentation doesn't make this any clearer,
so here are the most basic commands needed to create your own self-signed certificate (courtesy David Morel):